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Amendments To the Claims: 

Please amend the claims as shown. Applicants reserve the right to pursue any 
cancelled claims at a later date. 

1.-7. (cancelled) 

8. (new) An arrangement for securing data access of a first subscriber or a plurality of 
first subscribers arranged in a first sub-network of an automation network to a second 
subscriber or a plurality of second subscribers arranged in a second sub-network of the 
automation network, the arrangement comprising at least one secure-switch connected 
upstream of the first subscriber or the plurality of first subscribers for establishing a tunnel 
to the second subscriber or the plurality of second subscribers, the tunnel configured to 
securely transmit data via an insecure network, wherein 

the secure-switch is an Ethemet switch and at least one port of the tunnel is a layer-S- 
port for establishing a tunnel end point in accordance with the Ipsec-protocol, and 

the secure switch is configured to establish the tunnel representative for the first 
subscriber or the plurality of first the and to allocate the tuimel to the first subscriber or the 
plurality of first subscribers using a subscriber address of the first subscriber or the 
plurality of first subscribers. 

9. (new) The arrangement according to claim 8, fiirther comprising a configuration 
tool for configuring the automation network, the configuration tool configured to generate 
parameter data related to the secure-switch and to automatically transmit the generated data 
to the secure-switch. 

10. (new) The arrangement according to claim 8, wherein the secure-switch comprises 
at least one port configured as a WLAN end point for establishing a tunnel end point. 
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11. (new) The arrangement according to claim 8, wherein the secure-switch comprises 
^ at least one port configured to be used as a tunnel end point, the at least one point having a 

marker. 

12. (new) The arrangement according to claim 11, wherein the marker is switchable. 

13. (new) A secure-switch for securing data access of a first subscriber or a plxjrality 
of first subscribers arranged in a first sub-network of an automation network to a second 
subscriber or a plxirality of second subscribers arranged in a second sub-network of the 
automation network, wherein 

the secure switch is configured to be connected upstream of the first subscriber or the 
plurality of first subscribers, and 

the secure switch is an Ethernet switch having at least one port embodied as a layer-S- 
port for establishing a tunnel end point in accordance with the IPsec protocol, the secure 
switch comprising a Secure Channel Converter for establishing a tunnel to the second 
subscriber or the pluralityr of second subscribers, the tunnel configured to securely transmit 
data via an insecure network, wherein the Secure Channel Converter is configured to 
establish the tunnel representative for the first subscriber or the plurality of first subscribers 
and to allocate the tunnel to the first subscriber or the plurality of first subscribers using a 
subscriber address of the first subscriber or the plurality of first subscribers. 
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